Lead Control Management Officer

About this role:

Wells Fargo is seeking a Lead Control Management Officer

In this role, you will:

• Lead complex initiatives designed to mitigate current and emerging risks with broad impact
• Act as key participant in monitoring, evaluating, and measuring the impact of decisions practiced in Control Management functional area
• Monitor moderately complex business specific programs, and provide risk management consulting to support the business in designing and implementing risk-mitigation strategies
• Monitor, measure, evaluate, and report on the impact of decisions and controls to the relevant business group or functional area
• Develop and implement risk monitoring and risk reporting processes and controls
• Collaborate with relevant business group to identify current and emerging risks associated with business activities and operations, and provide guidance in developing and implementing risk-mitigating strategies
• Lead Control Management project or virtual teams

Required Qualifications:

• 5+ years of Risk Management or Control Management experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Experience in Risk Management, Control Management, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• Relevant experience in IT / Information Security risk and control management, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, or education
• Bachelor’s degree in Computer Science, Information Systems, or equivalent.
• Experience reviewing strategies and methodologies, evaluating the adequacy and effectiveness of Information security frameworks and standards, policies, procedures, processes, initiatives, products, and internal controls
• Strong Information Security technical skills and knowledge to identify, research and understand security control gaps and program compliance issues
• Demonstrated knowledge of Technology and Security risk frameworks – ISO 27001, COBIT, FFIEC, NIST 800-53, NIST CSF, ITIL etc.
• Ability to interact with all levels of team members in the organization
• Ability to take on a high level of responsibility, initiative, and accountability
• One or more professional certifications such as CISSP, CCSP, CISA, CISM, CRISC, CCSK etc.
• Ability to coordinate completion of multiple tasks and meet aggressive time frames
• Track record of providing constructive challenge and ability to drive and contribute towards issue identification, escalation and offering solutions for corrective action/remediation.
• Strong ability and experience working with and collaborating with leaders and team members at all levels and across functional lines
• Ability to work with complex teams; have global experience, preferably US banks

Job Expectations:

Enterprise Risk Leadership

• Lead the identification, assessment, management, and mitigation of current and emerging risks across the Control Management function.
• Drive the front‑line risk strategy for supported Lines of Business (LOBs), establishing and executing long‑term risk control goals.
• Lead complex, high‑impact initiatives designed to address enterprise risk exposures.

Risk Consulting & Advisory

• Provide specialist risk management consulting to business and technology teams, supporting the design and implementation of risk mitigation strategies, business processes, and internal controls.
• Offer credible challenge and recommendations to ensure appropriate risk decisions, including on complex issues with support from senior leaders.
• Guide business groups on developing, implementing, and monitoring programs to identify, assess, and mitigate risks.

Monitoring, Evaluation & Reporting

• Monitor, measure, and evaluate moderately complex programs to understand the impact of risk decisions and control effectiveness.
• Develop and implement risk monitoring and reporting processes to support consistent and actionable risk insights.
• Produce high‑quality management risk reporting for CIO, sub‑CIO, and senior leadership levels.

Issue Management & Remediation

• Facilitate the end‑to‑end issue management lifecycle, ensuring adherence to Issue Management Policy requirements.
• Review issue intake forms and corrective action plans to confirm that mitigation strategies are clearly defined and effective.
• Manage portfolios of issues, policy exceptions, and risk acceptances — including third‑party risk.
• Perform and support remediation activities including gap analysis, assessment of regulatory requirements, and thematic issue reviews.
• Conduct root cause analysis on technology incidents to identify ineffective or missing controls and drive sustainable remediation.

Control Frameworks & Policy Alignment

• Evaluate control strength in new products, solutions, programs, and projects, identifying associated risks.
• Deliver on key risk and control programs such as Control Design Standards, Control Blueprints, Technology RCSA, Operational Risk Events, and industry framework alignment.
• Monitor and report compliance with Issue Management Policy and support updates to risk policies, procedures, and standards.

Collaboration & Stakeholder Engagement

• Build and maintain strong relationships across FLOD, SLOD, audit, information security, compliance, regulatory, and corporate audit teams.
• Ensure effective risk communication protocols, promoting transparency and enabling cross‑functional information sharing.
• Work with diverse stakeholders to ensure they have the right tools, processes, and expertise to manage technology risks.

Technology Risk & LOB Support

• Support risk strategy execution across Technology LOBs and ensure effective implementation of front‑line risk management program requirements.
• Evaluate key risk and performance indicators to detect emerging risks in technology and operational domains.
• Provide high‑quality deliverables through a matrix staffing model to senior technology leaders and cross‑functional teams.

Posting End Date: 

5 May 2026

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

 

Wells Fargo maintains a drug free workplace.  Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.